Line 45:
Line 45:
| 2022
| 2022
| December 19, 2022
| December 19, 2022
−
| {{User|Yellows8}}
+
| {{User|Yellows8}}, {{User|PoroCYon}}
+
|-
+
| [[Stage2]] header RSA signature padding not checked properly
+
| [[Stage1]] uses the SWI RSA_Decrypt_Unpad routine to verify the RSA signature of the [[stage2]] header. However, it does not check the return value of this function. This will make stage1 use zero-initialized memory as the plaintext RSA message. However, due to the specific structure of this RSA message, this will quickly be caught by stage1.
+
|
+
|
+
| 2022
+
|
+
| {{User|PoroCYon}}
|}
|}